Description
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial.
Remediation
References
Related Vulnerabilities
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27128)
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14664)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1643)
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2025-47939)